Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mkipU0HZOfdM_EvAdADpxmnhoRM.roa
File:                     mkipU0HZOfdM_EvAdADpxmnhoRM.roa (raw, json)
Hash identifier:          dXpoXqkrnElfi9KdUH5CJiWBE8ZmMJ0J8OkZ6wydVv0=
Subject key identifier:   9A:48:A9:53:41:D9:39:F7:4C:FC:4B:C0:74:00:E9:C6:69:E1:A1:13
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0941
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mkipU0HZOfdM_EvAdADpxmnhoRM.roa
Signing time:             Sun 07 Feb 2021 11:53:07 +0000
ROA not before:           Sun 07 Feb 2021 11:53:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369 (0x941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 11:53:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9A48A95341D939F74CFC4BC07400E9C669E1A113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:f2:38:46:6e:78:11:e3:42:83:5b:a6:d0:
                    e3:35:f9:b1:6f:e7:8f:bc:7e:1f:a3:37:53:e5:69:
                    20:59:13:27:09:12:44:d2:69:fa:63:df:cc:4d:11:
                    17:2f:50:f1:2f:c0:c4:36:10:2e:ae:95:07:09:42:
                    33:56:fe:80:6e:7f:21:50:05:bf:66:3d:68:9f:97:
                    71:02:ef:fe:e5:a3:02:1e:53:fc:a2:f4:91:b7:15:
                    cb:6d:b2:14:0a:d3:a9:ea:a9:c7:be:9d:c5:43:e6:
                    1e:29:fd:0b:92:d3:bb:59:07:7d:54:40:c0:c1:cb:
                    05:22:2d:ce:54:86:ee:c8:64:77:2e:c9:2a:08:b6:
                    58:34:41:75:83:b6:60:77:08:10:e3:cb:df:df:16:
                    8f:f8:55:fd:c2:f8:98:b4:a8:7d:8a:1b:2e:79:57:
                    33:30:88:3f:81:39:3d:ce:ce:40:d8:ea:2f:b5:01:
                    00:73:f4:91:b0:97:f3:79:4f:5e:bb:83:34:a2:a1:
                    c0:f2:b1:d8:d8:eb:85:ec:6d:80:fa:2d:57:e8:4b:
                    1a:fb:ba:24:7d:7e:9c:53:0a:e6:56:c8:6c:60:ae:
                    11:d2:ec:2f:b5:3a:92:54:34:69:47:ad:13:a9:16:
                    ed:a1:d1:f6:cf:f7:35:b8:f8:22:35:91:6d:25:0c:
                    f3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:48:A9:53:41:D9:39:F7:4C:FC:4B:C0:74:00:E9:C6:69:E1:A1:13
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mkipU0HZOfdM_EvAdADpxmnhoRM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:1f:94:16:90:a3:7f:59:97:f4:fd:d7:99:cc:6b:7d:98:1a:
         8b:a9:c1:5f:89:9a:2a:ee:3f:58:c9:e1:5a:02:44:fe:af:65:
         4e:d4:49:ba:cd:bc:cb:13:09:6d:27:f7:2c:05:8f:16:c0:49:
         1d:09:a5:27:89:04:0a:f5:6c:9a:1a:5e:f5:81:fe:f5:5e:fe:
         37:51:73:ae:80:54:d1:36:04:1b:d9:1f:b0:a3:63:45:35:8c:
         50:40:3c:b4:e7:d9:d2:68:e1:b6:15:76:ab:3e:59:ca:f1:3e:
         53:f2:53:66:38:dc:f6:7d:e2:d9:32:7c:8a:c7:d3:ae:03:e3:
         85:38:3f:12:bf:03:94:69:be:de:59:35:08:8c:08:9e:d4:c5:
         1e:58:d8:8e:3a:52:25:5e:b8:f3:f5:da:0f:d2:70:5f:74:00:
         90:77:f8:fc:3d:7f:38:dd:26:f0:9c:28:65:35:60:b3:8a:0a:
         40:ba:32:05:a7:65:9d:2a:0b:d1:e4:b8:b9:01:bd:83:a7:b7:
         0d:b8:31:2b:b9:ea:ec:a5:8d:01:09:6d:b3:fc:8a:1d:17:60:
         2f:f8:73:84:66:a4:28:ef:c6:c1:13:fe:e0:5e:18:0a:f6:b9:
         27:aa:96:67:3f:1e:08:92:b1:82:2e:50:2a:3d:15:6e:e8:4c:
         54:ff:1b:29
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMTAyMDcx
MTUzMDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlBNDhBOTUzNDFEOTM5
Rjc0Q0ZDNEJDMDc0MDBFOUM2NjlFMUExMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQbPI4Rm54EeNCg1um0OM1+bFv54+8fh+jN1PlaSBZEycJEkTS
afpj38xNERcvUPEvwMQ2EC6ulQcJQjNW/oBufyFQBb9mPWifl3EC7/7lowIeU/yi
9JG3FcttshQK06nqqce+ncVD5h4p/QuS07tZB31UQMDBywUiLc5Uhu7IZHcuySoI
tlg0QXWDtmB3CBDjy9/fFo/4Vf3C+Ji0qH2KGy55VzMwiD+BOT3OzkDY6i+1AQBz
9JGwl/N5T167gzSiocDysdjY64XsbYD6LVfoSxr7uiR9fpxTCuZWyGxgrhHS7C+1
OpJUNGlHrROpFu2h0fbP9zW4+CI1kW0lDPMfAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUmkipU0HZOfdM/EvAdADpxmnhoRMwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL21raXBVMEhaT2Zk
TV9FdkFkQURweG1uaG9STS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpIwDQYJKoZIhvcNAQELBQADggEBABwflBaQo39Zl/T915nMa32YGoup
wV+JmiruP1jJ4VoCRP6vZU7USbrNvMsTCW0n9ywFjxbASR0JpSeJBAr1bJoaXvWB
/vVe/jdRc66AVNE2BBvZH7CjY0U1jFBAPLTn2dJo4bYVdqs+WcrxPlPyU2Y43PZ9
4tkyfIrH064D44U4PxK/A5Rpvt5ZNQiMCJ7UxR5Y2I46UiVeuPP12g/ScF90AJB3
+Pw9fzjdJvCcKGU1YLOKCkC6MgWnZZ0qC9HkuLkBvYOntw24MSu56uyljQEJbbP8
ih0XYC/4c4RmpCjvxsET/uBeGAr2uSeqlmc/HgiSsYIuUCo9FW7oTFT/Gyk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org